// LOG-204 // SECURITY
A security operations centre, stood up in ten weeks.
The partner had the client and the contract. They had no security operations capability. We designed, built and tuned the operations centre, then handed it over, branded as theirs, before the contract start date.
Start a deploymentA security operations centre that had to exist in ten weeks.
The integrator had signed a security client and hit the obvious problem: a credible operations centre means hiring scarce analysts, standing up a SIEM, and writing the detection content that makes it useful. None of that was going to happen before the contract start date, and the client expected a mature capability on day one.
How it ran.
- WK 1-2
Architecture
Multi-tenant detection design on Cortex XDR and Microsoft Sentinel, mapped to the client estate and the partner existing service desk.
- WK 3-6
Build and onboard
Platform stood up, log sources connected, SOAR playbooks written for Tier-1 triage, dashboards branded for the partner.
- WK 7-9
Tune and validate
Detection content tuned against real traffic, false-positive noise suppressed, escalation paths tested end to end.
- WK 10
Hand over
The platform live and handed across: detection content, SOAR playbooks, runbooks and dashboards, with the partner team trained to operate it under their own identity.
The result the partner kept.
What we deployed.
Cortex XDR + Microsoft Sentinel
A multi-tenant platform pairing Palo Alto Cortex XDR for endpoint and network detection with Microsoft Sentinel as the central SIEM, correlated across the full attack surface, with SOAR playbooks for Tier-1 triage.
An Operations Centre Your Team Runs
A security operations centre the partner operates and presents to their clients as an in-house capability, built on the detection content, SOAR playbooks and runbooks we delivered, with a clean hand-off into their existing service desk.
We sold a security capability we did not yet have. Belico designed it, built it, and trained our team to run it as us. Our client believes they hired an integrator with a mature SOC. In every way that matters, they did.
Tell us what your clients need.
A tri-cloud migration. A 200-site SD-WAN rollout. A security architecture before NIS2 hits. An AI system your client is asking about next quarter. We scope it, staff it, and deliver it under your brand. One conversation tells us if we are the right team.